The Java Runtime Environment (JRE) used by NetBackup, OpsCenter and related products do not allow Java Applets or Web Start to run and are not susceptible to Java Applet or Web Start vulnerabilities (updated January 13, 2011)

Issue

The Java Runtime Environment (JRE) used by Symantec's Veritas NetBackup (tm) and Backup Reporter (tm) do not allow Java Applets or Web Start to run and are not susceptible to Java Applet or Web Start vulnerabilities

Solution

The Java Runtime Environment (JRE) is used by the Symantec products listed in this TechNote. The JRE implementation used by these products does not allow external input, Applets or Web Start to run. As a result, they are not affected by SUN JRE untrusted Applet and Web Start security issues.

If the JRE used by these Symantec products is found to be vulnerable to any reported Java vulnerabilities, a Software Alert will be issued for any affected version(s). To sign up to receive Symantec Software Alerts see the link at the end of this document.

The following Symantec products are covered in this TechNote:

NetBackup 6.x and 7.x (as well as prior releases) along with their respective release updates, maintenance or feature packs use the JRE for the NetBackup Java Administration console.

NetBackup OpsCenter 7.x along with its respective release updates uses the JRE.

PureDisk Remote Office Edition uses JRE for the Web interface in the PureDisk 6.2, 6.5 and 6.6 releases along with their respective hotfixes and release updates. Previous releases of PureDisk do not use the JRE.

The above mentioned products are not vulnerable to JRE Applet or Web Start problems for the following reasons:

These products' byte code bases are local to the system.

None of these products run in an Applet or Web Start context as an application accessed by the user's web browser, nor do they run from an Applet or Web Start viewer.

None of these products download or otherwise receive Java code to be executed from an unknown source.

Symantec highly recommends that all customers sign up to receive Software Alerts for the products they are using. To subscribe to the Symantec Email Notification Service and any future Software Alerts, log in with your SymAccount and access the Subscribe: Email links on the following product pages: